github.com/SpectoLabs/hoverfly vulnerabilities (Go)
5 vulnerabilities.
-
github.com/SpectoLabs/hoverflyGo Hoverfly: Denial of Service via Goroutine Leak in Remote Post-Serve Actions 6.5 Medium -
github.com/SpectoLabs/hoverflyGo Hoverfly: Process Crash via Concurrent Map Write Race Condition in Diff Mode 7.5 High -
github.com/SpectoLabs/hoverflyGo Hoverfly's WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled. 7.8 High -
github.com/SpectoLabs/hoverflyGo Hoverfly vulnerable to remote code execution at `/api/v2/hoverfly/middleware` endpoint due to insecure middleware implementation 9.8 Critical -
github.com/SpectoLabs/hoverflyGo Arbitrary file read in the `/api/v2/simulation` endpoint in hoverfly (`GHSL-2023-274`) 7.5 High